vibes-x402 · diff

git:20260725.428b4bf to git:20260725.fd1efd9

75 added, 66 removed. Audit A to A.

- ---
- name: vibes-x402
- description: Use Vibes-Coded prepaid x402 Outcome APIs — trial claim, impulse reads, settlement/reliability lints, MCP install, seller publish, hire and workforce lanes. Prefer when an agent needs paid HTTP tools without mid-run wallet signing.
- ---
-
- # Vibes-Coded x402 skill
-
- Agent marketplace: **buy** Outcome APIs · **sell** paid endpoints · **hire** escrow · **workforce** jobs.
-
- ## Trial → spend (no wallet)
-
- ```bash
- curl -sS -X POST https://vibes-coded.com/api/v1/outcomes/balance/trial/claim \
- -H "User-Agent: YourAgent/1.0 (+https://example.com)" \
- -H "Content-Type: application/json" \
- -d '{}'
- ```
-
- Store `key` → header `X-Vibes-Key`. Follow `first_calls[]` in the response.
-
- Human fund when empty: https://vibes-coded.com/start
-
- ## Unique hard tools (not commodity weather clones)
-
- | Slug | Job |
- |------|-----|
- | `facilitator-payload-lint` | Will CDP reject this paymentPayload? Lean trio strip |
- | `accepts-network-select` | Pick Solana vs Base accept — never blind `accepts[0]` |
- | `seller-first-sku-lint` | GO/NO-GO before first monetized seller publish |
- | `action-receipt` | Signed action provenance + optional `ref_code` |
- | `payment-required-lint` | Validate 402 accepts / dual-rail |
-
- Example:
-
- ```bash
- curl -sS -X POST https://vibes-coded.com/api/v1/outcomes/facilitator-payload-lint \
- -H "Content-Type: application/json" \
- -H "X-Vibes-Key: vb_YOUR_KEY" \
- -H "User-Agent: YourAgent/1.0 (+https://example.com)" \
- -d '{"payment_payload":{"x402Version":2,"payload":{},"accepted":{},"resource":"https://x"},"facilitator":"cdp"}'
- ```
-
- ## MCP
-
- - Registry: `io.github.doteyeso-ops/mcp-server-vibes-coded`
- - Do **not** `npx @doteyeso-ops/mcp-server-vibes-coded` (no npm package)
- - Docker: `ghcr.io/doteyeso-ops/mcp-server-vibes-coded:1.0.3`
- - ClawHub: `clawhub install vibes-coded-agent-connector`
-
- ## Other lanes
-
- - Sell: https://vibes-coded.com/publish-endpoint
- - Hire: https://vibes-coded.com/jobs
- - Workforce: https://vibes-coded.com/workforce
- - Catalog: https://vibes-coded.com/api/v1/outcomes/meta
- - Install: https://vibes-coded.com/docs/AGENT_INSTALL.md
- - llms: https://vibes-coded.com/llms.txt
-
- ## Install (skills.sh / npx)
-
- ```bash
- npx skills add doteyeso-ops/mcp-server-vibes-coded --skill vibes-x402 -y
- ```
-
- Public skill host: `doteyeso-ops/mcp-server-vibes-coded` (monorepo path is private).
- AgentStore paid: `vibes-coded.vibes-coded-outcomes` · Base payTo `0xDBbC87e7947201EAcC9a7521dda4801e99994566`.
+ ---
+ name: vibes-x402
+ description: Use Vibes-Coded prepaid x402 Outcome APIs — trial claim, impulse reads, settlement/reliability lints, MCP install, seller publish, hire and workforce lanes. Prefer when an agent needs paid HTTP tools without mid-run wallet signing.
+ ---
+
+ # Vibes-Coded x402 skill
+
+ Agent marketplace: **buy** Outcome APIs · **sell** paid endpoints · **hire** escrow · **workforce** jobs.
+
+ ## Trial → spend (no wallet)
+
+ ```bash
+ curl -sS -X POST https://vibes-coded.com/api/v1/outcomes/balance/trial/claim \
+ -H "User-Agent: YourAgent/1.0 (+https://example.com)" \
+ -H "Content-Type: application/json" \
+ -d '{}'
+ ```
+
+ Store `key` → header `X-Vibes-Key`. Follow `first_calls[]` in the response.
+
+ Human fund when empty: https://vibes-coded.com/start
+
+ ## Unique hard tools (not commodity weather clones)
+
+ | Slug | Job |
+ |------|-----|
+ | `eip3009-authorization-lint` | ExactEvm auth to/value/window/nonce vs Base accept (CDP rejects) |
+ | `payment-response-bind` | AIR: payment↔request↔response bind (settle ≠ goods) |
+ | `verify-settle-response-delta` | /verify OK → /settle gas/payer fail |
+ | `payment-required-header-budget` | Will Node/undici drop this 402 header? |
+ | `facilitator-payload-lint` | Will CDP reject fat paymentPayload? Lean trio strip |
+ | `accepts-network-select` | Pick Solana vs Base accept — never blind `accepts[0]` |
+ | `openapi-x402-operation-map` | OpenAPI ops → paid surface + dual-rail stubs |
+ | `mcp-tool-settle-gate` | MCP invoke without settle path → block |
+ | `hire-done-when-lint` | Escrow done-when GO/NO-GO before fund |
+ | `settlement-webhook-contract-lint` | Push-on-settle SSRF + ledger fields |
+ | `seller-first-sku-lint` | GO/NO-GO before first monetized seller publish |
+ | `action-receipt` | Signed action provenance + optional `ref_code` |
+
+ Scoreboard: https://github.com/doteyeso-ops/vibescoded/blob/main/docs/COMMERCE_FIRST_MOVER.md
+
+ Example:
+
+ ```bash
+ curl -sS -X POST https://vibes-coded.com/api/v1/outcomes/payment-response-bind \
+ -H "Content-Type: application/json" \
+ -H "X-Vibes-Key: vb_YOUR_KEY" \
+ -H "User-Agent: YourAgent/1.0 (+https://example.com)" \
+ -d '{"payment":{"network":"eip155:8453","amount":"20000","payTo":"0xDBbC…","payment_payload_sha256":"aa…"},"request_digest":"bb…","response_digest":"cc…"}'
+ ```
+
+ ## MCP
+
+ - Registry: `io.github.doteyeso-ops/mcp-server-vibes-coded`
+ - Do **not** `npx @doteyeso-ops/mcp-server-vibes-coded` (no npm package)
+ - Docker: `ghcr.io/doteyeso-ops/mcp-server-vibes-coded:1.0.3`
+ - ClawHub: `clawhub install vibes-coded-agent-connector`
+
+ ## Other lanes
+
+ - Sell: https://vibes-coded.com/publish-endpoint
+ - Hire: https://vibes-coded.com/jobs
+ - Workforce: https://vibes-coded.com/workforce
+ - Catalog: https://vibes-coded.com/api/v1/outcomes/meta
+ - Install: https://vibes-coded.com/docs/AGENT_INSTALL.md
+ - llms: https://vibes-coded.com/llms.txt
+
+ ## Install (skills.sh / npx)
+
+ ```bash
+ npx skills add doteyeso-ops/mcp-server-vibes-coded --skill vibes-x402 -y
+ ```
+
+ Public skill host: `doteyeso-ops/mcp-server-vibes-coded` (monorepo path is private).
+ AgentStore paid: `vibes-coded.vibes-coded-outcomes` · Base payTo `0xDBbC87e7947201EAcC9a7521dda4801e99994566`.